Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-5461
3.5
LOWCVSS v3
Severity scale
010
Description
An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 12.0.0, < 12.0.4, >= 12.1.0, < 12.1.2, >= 11.11.0, < 11.11.7NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 12.0.0, < 12.0.4, >= 12.1.0, < 12.1.2, >= 11.11.0, < 11.11.7NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems